Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/8J_U163VHJGz3mYkU_Z8nOPNzLs.roa
File: 8J_U163VHJGz3mYkU_Z8nOPNzLs.roa (raw, json)
Hash identifier: ySxO9AbxNFCUUIRvi4cL9+47ciJxiwtE1n8DEO4wQAw=
Subject key identifier: F0:9F:D4:D7:AD:D5:1C:91:B3:DE:66:24:53:F6:7C:9C:E3:CD:CC:BB
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 0185F60A99E7399E25CAA6828284C154EBB9
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/8J_U163VHJGz3mYkU_Z8nOPNzLs.roa
Signing time: Sat 28 Jan 2023 01:42:47 +0000
ROA not before: Sat 28 Jan 2023 01:42:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35758
IP address blocks: 45.144.28.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:f6:0a:99:e7:39:9e:25:ca:a6:82:82:84:c1:54:eb:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Jan 28 01:42:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f09fd4d7add51c91b3de662453f67c9ce3cdccbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0b:e6:f9:af:d9:a5:6d:0f:ee:50:c6:95:4c:
5d:7b:72:94:ad:cc:65:84:4f:94:9c:55:6e:2c:1a:
c7:77:b8:9f:ca:c8:fd:09:01:a4:c0:08:05:c3:38:
7c:3e:ed:3d:6d:cb:02:20:30:77:b4:51:9e:5b:72:
64:a2:f2:31:7d:f2:7c:e8:ab:b8:6a:7b:5c:4c:d9:
a2:ac:b5:99:fc:6c:d7:fa:86:91:c8:6e:a9:33:67:
1e:c9:e8:17:ba:c7:d7:be:2a:bc:09:b9:c5:6c:55:
65:d7:86:6c:8d:df:9c:a6:c6:f0:12:18:e0:32:87:
ab:9a:f7:ed:ae:c6:e0:d5:e1:07:ce:0c:43:2a:6a:
f9:13:40:0b:09:d8:a8:ee:70:a9:57:eb:dd:95:84:
82:8d:ad:29:1d:73:4e:a3:1a:9e:71:9c:c7:72:a3:
05:2e:28:dd:08:85:5f:42:6b:4b:b7:75:2c:f7:1c:
a2:05:0d:bc:da:51:55:04:01:7e:e7:4c:da:ae:15:
7b:9a:ba:8b:1d:ce:ff:bf:30:38:6e:f5:a6:f4:b1:
05:be:66:dc:af:70:bb:8d:56:3f:c1:e7:09:45:8a:
c2:03:ce:84:de:17:51:5f:cf:0d:32:fe:cd:94:ed:
75:9e:bb:93:97:d0:a8:53:04:9d:dc:ca:f9:b7:c0:
98:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:9F:D4:D7:AD:D5:1C:91:B3:DE:66:24:53:F6:7C:9C:E3:CD:CC:BB
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/8J_U163VHJGz3mYkU_Z8nOPNzLs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.28.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:94:c5:b4:93:dc:d6:81:33:b9:17:3f:14:c0:72:54:ec:61:
bc:17:1d:01:29:39:2b:a2:07:a1:8e:9e:1f:3e:b1:88:7d:09:
f6:88:82:b8:73:c0:bc:cb:58:89:42:e7:d9:8c:72:c1:76:a9:
7e:8a:03:e2:3b:99:97:53:f0:55:09:49:7a:90:fb:71:01:92:
ba:64:ac:d9:0e:ee:38:de:48:27:26:43:8d:8e:03:76:09:ea:
22:a6:4b:89:37:fe:41:7f:0c:e8:19:4d:1f:85:52:20:f0:8e:
81:26:78:0a:9b:77:db:e2:3f:37:e5:90:97:48:54:b3:57:7e:
61:10:e2:9f:f2:47:d5:dd:94:06:73:4d:f8:c4:c2:80:98:e2:
ed:65:a5:65:0b:66:f9:6c:4f:86:b5:b8:ee:f1:b7:e0:9f:b9:
4f:a8:d2:5a:a9:f6:f0:f6:13:1a:c5:a8:97:a0:9b:98:e7:14:
25:bb:39:5b:c2:17:58:98:ba:77:47:fe:e3:e1:ea:80:f8:1d:
4b:1a:91:e0:80:e6:93:53:04:bb:67:10:24:47:d4:12:23:e6:
72:7c:b5:50:5f:0f:54:0a:e1:9a:1c:7f:8d:b5:dd:01:9b:46:
89:fa:a5:97:ea:7d:d5:95:7f:16:14:d2:63:4d:06:25:6f:57:
37:3d:7d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:23 2023 by rpki-client on console-fra.rpki-client.org